<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>MATRIX · Agentic Workflows</title>
  <link>https://derekwang2002.github.io/ai-intelligence/en/projects/github-agentic-workflows/</link>
  <description>Material changes in AI models, agents, engineering and infrastructure, with primary sources and recommendations.</description>
  <language>en</language>
  <lastBuildDate>Mon, 02 Nov 2026 16:56:00 GMT</lastBuildDate>
  <atom:link href="https://derekwang2002.github.io/ai-intelligence/en/feeds/projects/github-agentic-workflows.xml" rel="self" type="application/rss+xml"/>
  <item>
    <title>GitHub Agentic Workflows traces secret leaks through step outputs</title>
    <link>https://derekwang2002.github.io/ai-intelligence/en/events/ev-20261025-02/</link>
    <guid isPermaLink="false">ev-20261025-02-published</guid>
    <pubDate>Mon, 26 Oct 2026 16:03:24 GMT</pubDate>
    <category>New</category>
    <category>TRIAL</category>
    <description>&lt;p&gt;GitHub Agentic Workflows 0.93.5 adds static analysis that follows credential handoffs through step outputs, permits network credentials only in bounded safe-output jobs, returns secret-safe crash diagnostics and pins patched runtime dependencies. Version 1.0.0 from the same day is explicitly prerelease and is not treated as GA.&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Why read: &lt;/strong&gt;GitHub Agentic Workflows brings cross-step credential handoffs into static analysis, adding a concrete agent-workflow safety boundary.&lt;/p&gt;&lt;p&gt;Recommendation: TRIAL&lt;/p&gt;&lt;p&gt;Sources: &lt;a href=&quot;https://github.com/github/gh-aw/releases/tag/v0.93.5&quot;&gt;GitHub Agentic Workflows 0.93.5 release&lt;/a&gt; · &lt;a href=&quot;https://github.github.com/gh-aw/blog/2026-10-26-weekly-update/&quot;&gt;GitHub Agentic Workflows weekly update&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
